Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => webmaster@scamdex.com [delivery-date:] => Tue, 09 Oct 2012 01:24:05 -0700 [received:] => Array ( [0] => from [119.226.3.14] (port=43137 helo=segment-119-226.sify.net)by lester.newsblaze.com with esmtp (Exim 4.77)(envelope-from )id 1TLV6h-0005fs-6Ffor webmaster@scamdex.com; Tue, 09 Oct 2012 01:24:05 -0700 [1] => from [85.142.69.134] (helo=ivemhtovtaxf.ywvva.com)by segment-119-226.sify.net with esmtpa (Exim 4.69)(envelope-from )id 1MM49Z-4761ht-76for webmaster@scamdex.com; Tue, 9 Oct 2012 13:54:03 +0530 ) [from:] => NatWest [to:] => [subject:] => NatWest Secure Activation Confirmation [date:] => Tue, 9 Oct 2012 13:54:03 +0530 [mime-version:] => 1.0 [x-priority:] => 3 [x-mailer:] => lfklbzkuih.79 [message-id:] => <4087677659.M81L0PHI554646@cwnqlbkfzrcvyz.miljkvoilruswdi.su> [content-type:] => multipart/mixed; boundary="----=a__tsjfxiva_62_84_81" [x-spam-status:] => No, score=3.5 [x-spam-score:] => 35 [x-spam-bar:] => +++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Dear Customer, This message confirms your registration with the NatWest Secure Verified by Visa on Tue, 9 Oct 2012 13:54:03 +0530 with card ending XXXX-XXXX-XXXX-0992. This service provides added safety when you shop online and is offered to you free of charge. For future reference when changing your password a minimum of £1 must be in your bank account at that time. From now on, when shopping online at participating merchants who have asked for this service to be put in place, you will be prompted to enter random sequential characters from your password you created during the service activation. Please keep your password secret as you will need it for future purchases. You can also change any details that you have submitted by logging in to your Personal Account Manager on the link provided below. This will enable you to change your username, personal message, and password. Alternatively if you have any questions or problems regarding registration, logging in, or re setting your password , we are here to help! You can visit http://www.natwest.com/natwestsecure/debit for further information. Please keep this email with the NatWest Secure site link in a safe place. Your Bank and the Police will never contact you to ask you to disclose your online banking or payment card PIN's, or your password information. Thank you.NatWest Customer Service Centre [...] Content analysis details: (3.5 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [119.226.3.14 listed in dnsbl.sorbs.net] 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [119.226.3.14 listed in bb.barracudacentral.org] 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.